Comments (4)
swankjesse
commented on May 21, 2024
3
Can do.
from okio.
marcelstoer
commented on May 21, 2024
3
Looking forward to this as we're affected as well. As per https://square.github.io/okio/changelog/#version-320 3.2.0 is the latest not requiring Kotlin 1.8. Can we expect a 3.2.1 which addresses CVE-2023-3635 then? That would be fantastic!
from okio.
zangye
commented on May 21, 2024
1
hello. when can you back-port the fix in 81bce1a to an Okio version before the Kotlin upgrade in 3.3.0?
from okio.
swankjesse
commented on May 21, 2024
1
I’ve shipped Okio 1.17.6 that includes a fix for this and has no Kotlin dependency.
I don’t think it’s a good investment in our time to backport this fix for earlier Kotlin versions. Both Okio and the Kotlin stdlib have strong backwards compatibility, and you will be safe running on Okio 3.6.0 + Kotlin Stdlib 1.9.10 even if your build toolchain uses an earlier Kotlin release.
from okio.
Related Issues (20)
- what verison do I need to update For fixing CVE-2023-3635 HOT 5
- ZipFileSystem.metadata leaves file open
- Aborting read on Pipe HOT 1
- Musing about allocate() and allocateDirect() and WASM HOT 1
- Potential file leak in `FileSystem.read()` method HOT 9
- Feature request: set endianess at library level HOT 3
- Invalid java classname in GzipSource.kt HOT 5
- Is exposing flush in Sink a good idea ? HOT 2
- Gradle reports that okio references itself HOT 2
- Add target `watchosDeviceArm64` HOT 2
- Publish okio-fakefilesystem with wasm support HOT 1
- NullPointerException on commonCompleteSegmentByteCount HOT 4
- Using FileSystem.SYSTEM.listRecursively() on MacOS, it returns incorrect directory name. HOT 3
- Update multiplatform example docs for file system HOT 1
- Gitt
- Add zip file support on non-JVM targets. HOT 3
- Pipe.fold: destination sink can remain open even after pipe closed HOT 2
- The compatibility issue with TarArchiveOutputStream
- Github lives
- ZipFileSystem should expose more metadata HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from okio.